Fixing Security Through Obscurity?

LineNoiz asks: "I work as a junior developer at a small company that sells check printing software. One of my company's favorite things to tell customers is how secure our product is and how it will reduce check fraud (we even sell check fraud insurance). I cringe everytime I hear them say it, because I know that it is 'secure' only because of it's relative obscurity. I personally know very little about security, and really have no idea what it would take to make our product secure. All I really know is that this is a problem waiting to happen. How can I convince my managers that our security is nothing to brag about? How can I convince them to spend the time and money to make it secure? Where can I myself go to learn more about security and what it would take to make/keep it secure?"

Hmmmm....

[zulux]

You're an underpaid jr. developer....

Your company makes check writing software.....

You want to show them that their software is insecure....

Your Poor. They have checks. Things are insecure.....

Hmm....

Re:convincing the managers

[Anonymous Coward]

The risky way would be to create and demonstrate an exploit. Et voila, they're convinced.

That's like saying that the way to demonstrate that guns are deadly is to kill someone. Et voila, tres stupid.

Re:Art of the Steal

[larry bagina]

where can i steal it?

Re:Hmmmm....

[Anonymous Coward]

You obviously haven't been around Slashdot very long, since you missed the obligatory numbering scheme:

1. You're an underpaid jr. developer....

2. Your company makes check writing software.....

3. You want to show them that their software is insecure....

4. Your Poor. They have checks. Things are insecure.....

5. ???

6. Profit!